Summary
Microsoft has identified a threat actor known as Storm-1977, which has been executing password spraying attacks on cloud tenants within the education sector over the past year. The attacks utilize AzureChecker.exe, a Command Line Interface (CLI) tool employed by various threat actors, as noted by the Microsoft Threat Intelligence team in their analysis. This highlights the ongoing security challenges faced by educational institutions in safeguarding their cloud environments against such malicious activities.